HBP Financial Services Group
April 30, 2021
•[ financial, phishing, finance ]
HBP Financial Services discovers two compromised email accounts utilized to commit financial fraud.
Hotbit
April 29, 2021
•[ hack, ddos, finance ]
Cryptocurrency trading platform Hotbit shuts down all services for at least a week after a cyberattack takes down several of its services.
Banca di Credito Coperativo (BCC)
April 27, 2021
•[ ransomware, malware, finance ]
Banca di Credito Coperativo (BCC) is hit with a DarkSide ransomware attack.
Bank of Oak Ridge
April 26, 2021
•[ financial, finance ]
The Bank of Oak Ridge suffers a cybersecurity incident that allowed unauthorized access to systems containing sensitive financial information of customers.
First Horizon Corporation
April 15, 2021
•[ hack, finance ]
Bank holding company First Horizon Corporation discloses that some of its customers had their online banking accounts breached by unknown attackers earlier this month.
Celsius Network
April 14, 2021
•[ leak, phishing, finance ]
Cryptocurrency rewards platform Celsius Network discloses a security breach exposing customer information that led to a phishing attack.
Upstox
April 11, 2021
•[ hack, finance ]
Indian stock trading firm Upstox reveals to users that it has suffered a serious security breach that may have seen unauthorized criminal access to millions of customers' personal information.
Upstox
April 8, 2021
•[ finance, leak ]
In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt hashes. Extensive "know your customer" information was also exposed including scans of bank statements, cheques and identity documents complete with Aadhaar numbers. The data was provided to HIBP by a source who requested it be attributed to "white_peacock@riseup.net".
Indonesia's major banks
March 31, 2021
•[ social, phishing, finance ]
Researchers from Group-IB warn that cybercriminals are targeting Indonesia's major banks posing as bank representatives or customer support team members on Twitter.
MobiKwik
March 30, 2021
•[ leak, finance ]
MobiKwik says it is investigating claims of data breach after a website claimed to have exposed private information of nearly 100 million users of the Indian mobile payments startup.
Dollar Bank
March 24, 2021
•[ leak, finance ]
Dollar Bank files a notice of data breach after learning that an unauthorized party was able to access confidential information belonging to Standard Bank customers before the two banks merged.
CNA Financial
March 23, 2021
•[ ransomware, malware, finance ]
Insurance giant CNA suffers a ransomware attack using a new variant called Phoenix CryptoLocker that is possibly linked to the Evil Corp hacking group.
Comission para el Mercado Financiero
March 17, 2021
•[ hack, misconfiguration, finance ]
Chile's Comision para el Mercado Financiero (CMF) has disclosed that their Microsoft Exchange server was compromised through the recently disclosed ProxyLogon vulnerabilities.
Nikkei
March 17, 2021
•[ hack, finance ]
Nikkei has revealed incidents of unauthorized access to some email accounts used by Nikkei China and Nikkei's Hong Kong bureau.
Roll
March 14, 2021
•[ hack, finance ]
A security breach at cryptocurrency platform Roll allows a hacker to obtain the private key to its hot wallet and steal its contents " worth about $5.7 million.
K.L.S. Capital Ltd
March 13, 2021
•[ hack, finance ]
BlackShadow have now hacked the servers of K.L.S. Capital Ltd.
Unnamed international bank in Mexico
March 12, 2021
•[ ransomware, malware, finance ]
Researchers from eSentire reveal the details of a new campaign of attacks by the REvil ransomware gang. The affected organizations include two law firms, an insurance company, an architectural firm, a construction company and an agricultural co-op, all located in the U.S.; as well as two large international banks (one in Mexico and one in Africa); and a European manufacturer.
Bank of Utah
March 9, 2021
•[ hack, misconfiguration, finance ]
Hackers gained access to live surveillance cameras installed at Tesla, Equinox, healthcare clinics, jails, and banks, including the Bank of Utah
Equinox
March 9, 2021
•[ hack, misconfiguration, technology ]
Hackers gained access to live surveillance cameras installed at Tesla, Equinox, healthcare clinics, jails, and banks, including the Bank of Utah. In addition to images captured from the cameras, the hacker also shared screenshots of their ability to gain root shell access to the surveillance systems used by Cloudflare and at Telsa HQ.
DODO
March 8, 2021
•[ hack, finance ]
Decentralized exchange and liquidity provider DODO is hacked, resulting in a loss of funds amounting to $3.8 million.